A communication device for managing a key necessary for secure near field communication includes an ic card function executing unit, a reader/writer function executing unit, a receiving unit, a determining unit, and a function execution controlling unit. The ic card function executing unit executes a function of an ic card. The reader/writer function executing unit executes a function of a reader/writer. The receiving unit receives a command. The determining unit determines whether the receiving command is intended for the ic card function or the reader/writer function. The function execution controlling unit controls the ic card function executing unit to execute the ic card function or the reader/writer function executing unit to execute the reader/writer function according to a result determined by the determining unit.
|
1. A communication device for managing a key necessary for secure near field communication, the communication device comprising:
a tamper resistant device having an ic card function and a reader/writer function;
a receiver;
at least one processor; and
at least one memory device storing instructions which when executed by the at least one processor cause the at least one processor to operate with the tamper resistant device and the receiver to:
(a) receive a first command from a reader/writer device configured to form a magnetic field, the first command being received directly from the reader/writer device;
(b) in response to the first command being received, execute the ic card function of the tamper resistant device;
(c) receive a second command from an ic card, the second command being received directly from the ic card; and
(d) in response to the second command being received, execute the reader/writer function of the tamper resistant device, the reader/writer function including acquiring information from the ic card.
8. A method of operating a communication device for managing a key necessary for secure near field communication, the communication device including: (i) a tamper resistant device having an ic card function and a reader/writer function; and (ii) instructions, the method comprising:
(a) causing a receiver to receive a first command from a reader/writer device configured to form a magnetic field, the first command being received directly from the reader/writer device;
(b) in response to the first command being received, causing the at least one processor to execute the instructions to execute the ic card function of the tamper resistant device;
(c) causing the receiver to receive a second command from an ic card, the second command being received directly from the ic card; and
(d) in response to the second command being received, causing the at least one processor to execute the instructions to execute the reader/writer function of the tamper resistant device, the reader/writer function including acquiring information from the ic card.
9. A non-transitory computer readable medium storing instructions structured to cause a computer to execute a communication method for managing a key necessary for secure near field communication, the computer including: (i) a tamper resistant device having an ic card function and a reader/writer function; and (ii) instructions, the method comprising:
(a) causing a receiver to receive a first command from a reader/writer device configured to form a magnetic field, the first command being received directly from the reader/writer device;
(b) in response to the first command being received, causing the at least one processor to execute the instructions to execute the ic card function of the tamper resistant device;
(c) causing the receiver to receive a second command from an ic card, the second command being received directly from the ic card; and
(d) in response to the second command being received, causing the at least one processor to execute the instructions to execute the reader/writer function of the tamper resistant device, the reader/writer function including acquiring information from the ic card.
10. A communication device for managing a key necessary for secure near field communication, the communication device comprising:
a tamper resistant device having an ic card function and a reader/writer function an ic card function executing unit configured to execute the ic card function;
a reader/writer function executing unit configured to execute the reader/writer function;
a receiving unit configured to receive:
(a) a first command from a reader/writer device configured to form a magnetic field, the first command being received directly from the reader/writer device; and
(b) a second command from an ic card, the second command being received directly from the ic card; and
a function execution controlling unit configured to:
(a) in response to the first command being received, control the ic card function executing unit to execute the ic card function of the tamper resistant device; and
(b) in response to the second command being received, control the reader/writer function executing unit to execute the reader/writer function of the tamper resistant device, the reader/writer function including acquiring information from the ic card.
2. The communication device of
(a) store:
(i) information necessary for executing the ic card function; and
(ii) information necessary for executing the reader/writer function;
(b) execute the reader/writer function utilizing:
(i) the information necessary for executing the ic card function; and
(ii) the information necessary for executing the reader/writer function.
3. The communication device of
4. The communication device of
(a) the first command is received directly by secure near field communication; and
(b) the second command is received directly by secure near field communication.
5. The communication device of
6. The communication device of
7. The communication device of
determine whether a received command is intended for the ic card function or the reader/writer function.
|
The present application claims priority to Japanese Patent Application JP 2006-235802 filed in the Japanese Patent Office on Aug. 31, 2006, the entire contents of which are incorporated herein by reference.
The present application relates to communication devices, communication methods, and programs. In particular, the present application relates to a communication device, a communication method, and a program for enabling secure near field communication to be efficiently performed.
The use of an integrated circuit (IC) card system capable of performing near field communication, which is a type of radio communication, is rapidly spreading due to convenience thereof.
Such an IC card system is constituted by an IC card and a reader/writer. In the IC card system, the reader/writer generates a carrier wave, e.g., an electromagnetic wave (a radio frequency (RF) wave), whereby a so-called radio frequency (RF) field (a magnetic field) is formed. Close approach of the IC card to the reader/writer causes the power to be supplied to the IC card through electromagnetic induction, which enables data transmission to be performed between the IC card and the reader/writer.
IC card systems employ a tamper resistant device referred to as a secure application module (SAM) as a device for securely processing data that is acquired though this near field communication. By implementing a SAM in an IC card and a reader/writer, two-way secure near field communication can be performed.
A SAM implemented in an IC card or a reader/writer is generally designed to dedicate to one of a function of an IC card and a function of a reader/writer. More specifically, a SAM controls a data encryption operation in near field communication and manages keys utilized in the encryption operation. Since parameters referred to in the operation differ between the IC card function and the reader/writer function, for example, the SAM dedicated to the IC card function and the SAM dedicated to the reader/writer function are designed so that different parameters are set in each SAM.
Japanese Unexamined Patent Application Publication No. 2006-195792 discloses embodiments for implementing a SAM in a reader/writer and for carrying out secure processing in the reader/writer.
However, when SAMs are designed to dedicate to one of an IC card function and a reader/writer function as described above, the SAM dedicated to the IC card function cannot be utilized as the SAM dedicated to the reader/writer function. The same applies to the opposite case.
In addition, for example, in a case where a SAM has a subscriber identity module (SIM)-like shape and can be removably utilized, it is necessary for users to switch between a SAM dedicated to an IC card function and a SAM dedicated to a reader/writer function depending on the desired function, which is troublesome.
Embodiments of the present application are provided in view of such circumstances, and enable a single SAM to execute both the IC card function and the reader/writer function.
According to an embodiment, a communication device for managing a key necessary for secure near field communication includes IC card function executing means for executing a function of an IC card, reader/writer function executing means for executing a function of a reader/writer, receiving means for receiving a command, determining means for determining whether the received command is intended for the IC card function or the reader/writer function, and function execution controlling means for controlling the IC card function executing means to execute the IC card function or the reader/writer function executing means to execute the reader/writer function according to a result determined by the determining means.
The communication device may further include storage means for storing information necessary for executing the IC card function and information necessary for executing the reader/writer function. The reader/writer function executing means may execute the reader/writer function utilizing the information necessary for executing the IC card function as well as the information necessary for executing the reader/writer function.
A communication method according to another embodiment includes the steps of executing a function of an IC card, executing a function of a reader/writer, receiving a command, determining whether the received command is intended for the IC card function or the reader/writer function, and executing the IC card function through the processing performed at the step of executing the IC card function or the reader/writer function through the processing performed at the step of executing the reader/writer function according to a result obtained in the processing performed at the step of determining.
A program according to still another embodiment causes a computer to execute a communication method including the steps of executing a function of an IC card, executing a function of a reader/writer, receiving a command, determining whether the received command is intended for the IC card function or the reader/writer function, and executing the IC card function through the processing performed at the step of executing the IC card function or the reader/writer function through the processing performed at the step of executing the reader/writer function according to a result obtained in the processing performed at the step of determining.
In the communication device, the communication method, and the program according to an embodiment, a command is received. It is determined whether the received command is a command intended for the IC card function or a command intended for the reader/writer function. According to the determination result, the IC card function or the reader/writer function is executed.
A single SAM to execute both the IC card function and the reader/writer function, for example, in an embodiment.
Additional features and advantages are described herein, and will be apparent from, the following Detailed Description and the figures.
According to an embodiment, a communication device for managing a key necessary for secure near field communication includes IC card function executing means (for example, a central processing unit (CPU) 21 shown in
The communication device may further include storage means (for example, an electronically erasable and programmable read only memory (EEPROM) 24 shown in
A communication method according to another embodiment for a communication device that manages a key necessary for secure near field communication or a program according to still another embodiment for causing a computer to execute a communication method for managing a key necessary for secure near field communication includes the steps of executing a function of an IC card (for example, STEP S8 shown in
The communication device 1 has both functions of an IC card and functions of a reader/writer, and appropriately executes one of the functions depending on utilization of the communication device 1. More specifically, the communication device 1 is capable of performing secure near field communication with an IC card 2 while serving as a reader/writer as shown in
A point of sales system (POS) terminal 3 shown in
For example, a command supplied from the POS terminal 3 shown in
The communication device 1 may be a portable device, such as a mobile phone, or may be a fixed device that is combined with a POS terminal.
The communication device 1 includes a SAM (secure application module) 11, an RF (radio frequency) unit 12, and a controller 13.
The SAM 11 has, for example, a SIM (subscriber identity module)-like shape, and removably inserted into the communication device 1. The SAM 11 securely processes data that is acquired via near field communication performed in the communication device 1 while serving as an IC card or a reader/writer.
The RF unit 12 allows near field communication to be performed with a communication partner utilizing a carrier wave.
The controller 13 controls the SAM 11 and the RF unit 12 to execute processing for realizing the IC card function or the reader/writer function.
The communication device 1 may further include a control unit (not shown) for controlling communication with the POS terminal 3 in a case where the communication device 1 executes functions of a reader/writer as shown in
The SAM 11 includes a central processing unit (CPU) 21, a read only memory (ROM) 22, a static random access memory (SRAM) 23, an electronically erasable and programmable read only memory (EEPROM) 24, a communication unit 25, a random number generator 26, and an encryption/decryption engine 27, which are connected to each other through a bus 28.
The CPU 21 loads, to the SRAM 23, programs stored in the ROM 22 or programs installed in the EEPROM 24 from the outside, and executes the programs.
As shown in
Referring back to
The EEPROM 24 serves as a non-volatile user memory area, and stores data used in the IC card function and the reader/writer function. The EEPROM 24 also stores programs sent from external devices. A ferroelectric random access memory (FERAM) may be used instead of the EEPROM.
The communication unit 25 sends and receives data to and from the controller 13, which is connected to the SAM 11. The SAM 11 may be connected to external devices in a contact or contactless manner.
The random number generator 26 generates random numbers to be used by the encryption/decryption engine 27.
The encryption/decryption engine 27 is used for encryption and decryption of a communication path between an IC card and a reader/writer, for generation of access keys used when accessing data, for encryption and decryption of user data, and for mutual authentication.
An operation of the SAM 11 of the communication device 1 will be described next with reference to a flowchart illustrated in
After the insertion of the SAM 11 into a slot (not shown) of the communication device 1 at STEP S1, the SAM 11 is powered on at a timing given by the controller 13 at STEP S2. The initialization program 32 is activated to perform initialization of hardware and software at STEP S3.
After the completion of the initialization of the hardware and the software, the OS 31 is activated to perform mutual authentication between the SAM 11 and the controller 13 at STEP S4. After the mutual authentication is performed between the SAM 11 and the controller 13 in such a manner, the SAM 11 is ready to operate in the communication device 1 and is ready to exchange data with the controller 13.
As a method for the mutual authentication, a symmetric key cryptography defined by, for example, ISO/IEC 9798-2 can be used. However, the method is not limited to this particular example. At the same time as such mutual authentication, a temporary session key is shared between the SAM 11 and a device connected thereto, and communication data, which is encrypted using this session key, is exchanged between the SAM 11 and the device connected thereto. If different session keys are used in each session, the same shared key may be used at the time of mutual authentication in each device. However, security increases when different shared keys are used.
After the completion of the mutual authentication, the OS 31 waits until a command packet is received at STEP S5. Upon receiving the command packet at STEP S5, the OS 31 stores the received command packet in a transmission/reception buffer provided in the SRAM 23 of the SAM 11 at STEP S6. The OS 31 also activates the command packet processing program 33.
The command packet processing program 33 determines whether the received command packet is intended for the IC card function or the reader/writer function next at STEP S7.
As shown in
Additionally, as shown in
More specifically, the command packet processing program 33 refers to the table shown in
A packet length 52 of the command packet shown in
A command code 53 indicates a processing content based on a protocol specification of the system. The command data 54 is used in the processing corresponding to the command code 53.
A cyclic redundancy check (CRC) 55 is used for verifying the consistency of the data sequence from the packet length 52 to the command data 54 of the command packet. For example, the CRC 55 may be a result of a CRC-CCITT calculation. The CRC 55 is re-calculated if the command packet is modified in a device that the packet goes through.
Referring back to
The IC card function program 34 executes processing of an IC card function specified by the command code 53 of the supplied command packet using the command data 54.
On the other hand, if the received command packet is determined to be intended for the reader/writer function at STEP S7, the process proceeds to STEP S9. At STEP S9, the command packet processing program 33 activates the reader/writer function program 35, and supplies the received command packet to the reader/writer function program 35.
The reader/writer function program 35 executes processing of a reader/writer function specified by the command code 53 of the supplied command packet using the command data 54.
Thereafter, the operation is terminated.
In the above, the reader/writer function and the IC card function of the communication device 1 have been separately described with reference to
For example, if information regarding another IC card (not shown) is needed in processing performed between the communication device 1 serving as an IC card and the reader/writer 4 as shown in the example of
More specifically, when the communication device 1 serving as an IC card is put over the reader/writer 4, the communication device 1 executes processing of the IC card. For example, if a message saying “Please put another IC card over the reader/writer” is displayed on a display unit (not shown) of the communication device 1 in the course of the processing and a user performs a predetermined operation (e.g., a user operates a predetermined button (not shown) of the communication device 1), the reader/writer function is activated in the communication device 1 that has been operating as an IC card. The communication device 1 then serves as a reader/writer and waits for the communication with the IC card.
If the other IC card is put over the communication device 1 serving as a reader/writer, the communication device 1 reads necessary information from the other IC card using the reader/writer function. Then, the IC card function is activated again, and the communication device 1 returns, as an IC card, a response based on the information acquired from the other IC card to the reader/writer 4.
As described above, the SAM 11 of the communication device 1 has both functions of an IC card and functions of a reader/writer, and executes one of the functions depending on the received command. Thus, secure near field communication can be performed in the communication device 1, for example, without switching the SAM 11 depending on the function to be utilized.
Meanwhile, when the communication device 1 executes reader/writer functions (
In an embodiment, the communication device 1 shown in
For example, the communication device 1 shown in
As described above, the access key has been calculated in the POS terminal 3, which means a service provider that manages the POS terminal 3 knows security information (an algorithm and keys used for accessing). Parties other than manufactures of the communication device 1 serving as a reader/writer use, for example, Internet protocol (IP) resources, due to which a security problem may be caused.
For this problem, configurations of the embodiments allow information regarding security between both parties and processing that uses the information to be performed in a closed environment of a secure access module. Accordingly, the IP resources regarding security do not have to be disclosed to the outside, and thus the IC card system can be utilized in more secure manner.
Herein, the IC card information is acquired from the IC card 2 and the access key necessary for the communication with the IC card 2 is decided based on the information. However, the communication device 1 may acquire information indicating the access key necessary for the communication with the current communication target IC card 2 and information indicating a version of the access key from, for example, the POS terminal 3, and may perform the communication with the IC card 2 using the access key corresponding to the information.
Accordingly, in this case, when processing performed in the communication device 1 (i.e., an application executed in the communication device 1) utilizes the information supplied from, for example, a plurality of service providers (POS terminals or the like), one service provider cannot know access keys of other service providers. Thus, a risk of key information leakage can be reduced.
In addition, in the configuration of the SAM 11 shown in
A POS terminal 3 is connected to a network 51, such as a local area network (LAN) or the Internet. A server 52 for storing programs to be downloaded to the communication device 1 is connected to the network 51.
More specifically, the communication device 1 communicates with the server 52 through the POS terminal 3 and the network 51 to download necessary programs, and stores the downloaded programs in an EEPROM 24.
A media drive 53 is connected to a POS terminal 3 through a universal serial bus (USB) or the like. Programs may be read out from a removable recording medium, such as a flexible disc, a compact disc read only memory (CD-ROM), a magneto-optical (MO) disc, a digital versatile disc (DVD), a magnetic disc, or a semiconductor memory, that is inserted into the drive 53, and may be installed in an EEPROM 24.
As described above, programs can be downloaded. Accordingly, for example, a part of stored programs can be downloaded, whereby functions can be easily switched.
It should be understood that various changes and modifications to the presently preferred embodiments described herein will be apparent to those skilled in the art. Such changes and modifications can be made without departing from the spirit and scope of the present subject matter and without diminishing its intended advantages. It is therefore intended that such changes and modifications be covered by the appended claims.
Patent | Priority | Assignee | Title |
11004069, | Oct 03 2013 | MORGAN STANLEY SENIOR FUNDING, INC | Article and method for transaction irregularity detection |
9491273, | May 27 2010 | Orange | Shell for mobile telephone with NFC functionality |
Patent | Priority | Assignee | Title |
5727230, | Apr 28 1994 | Mitsubishi Denki Kabushiki Kaisha; Mitsubishi Electric Semiconductor Software Co., Ltd.; Mitsubish Denki Kabushiki Kaisha; MITSUBISHI ELECTRIC SEMICONDUCTOR SOFTWARE CO , LTD | Apparatus for electromagnetic communication between a computer and a non-contact IC card |
5959276, | Apr 12 1993 | Kabushiki Kaisha Toshiba | Issuing customized IC cards of different types |
6352202, | Jan 12 1998 | FUJIFILM IMAGING SYSTEMS CO , LTD | Method and system for controlling contactless IC cards |
7240345, | Feb 16 2001 | Sony Corporation | Data processing apparatus and associated method |
7363448, | Nov 29 2004 | Sony Corporation | Data storage apparatus, data processing method, recording medium, and program |
7478435, | Oct 30 2001 | Sony Corporation | Version management system for multiple application elements |
7487203, | Oct 31 2001 | Sony Corporation | Data-processing apparatus, data-processing method and program |
7620822, | Jan 09 2004 | Sony Corporation | Information processing system for controlling integrated circuit cards at a command level |
7634295, | Mar 16 2004 | Sony Corporation | Communication system, settlement management apparatus and method, portable information terminal and information processing method, and program |
7766237, | Oct 23 2003 | Sony Corporation | Mobile radio communication apparatus |
20020069169, | |||
20030167398, | |||
20040230801, | |||
20040247118, | |||
20050076212, | |||
20050182926, | |||
20060101136, | |||
20060101512, | |||
20060198364, | |||
20060214006, | |||
20070026893, | |||
20080005799, | |||
JP2002175552, | |||
JP2005196693, | |||
JP2006195795, |
Executed on | Assignor | Assignee | Conveyance | Frame | Reel | Doc |
Aug 29 2007 | Sony Corporation | (assignment on the face of the patent) | / | |||
Oct 02 2007 | MIURA, ATSUSHI | Sony Corporation | ASSIGNMENT OF ASSIGNORS INTEREST SEE DOCUMENT FOR DETAILS | 020017 | /0079 |
Date | Maintenance Fee Events |
May 30 2013 | ASPN: Payor Number Assigned. |
Jun 28 2016 | M1551: Payment of Maintenance Fee, 4th Year, Large Entity. |
Jul 01 2020 | M1552: Payment of Maintenance Fee, 8th Year, Large Entity. |
Date | Maintenance Schedule |
Jan 08 2016 | 4 years fee payment window open |
Jul 08 2016 | 6 months grace period start (w surcharge) |
Jan 08 2017 | patent expiry (for year 4) |
Jan 08 2019 | 2 years to revive unintentionally abandoned end. (for year 4) |
Jan 08 2020 | 8 years fee payment window open |
Jul 08 2020 | 6 months grace period start (w surcharge) |
Jan 08 2021 | patent expiry (for year 8) |
Jan 08 2023 | 2 years to revive unintentionally abandoned end. (for year 8) |
Jan 08 2024 | 12 years fee payment window open |
Jul 08 2024 | 6 months grace period start (w surcharge) |
Jan 08 2025 | patent expiry (for year 12) |
Jan 08 2027 | 2 years to revive unintentionally abandoned end. (for year 12) |